Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/5BcCQkgLdnh-Rt93X31HRwkCbrc.roa
File: 5BcCQkgLdnh-Rt93X31HRwkCbrc.roa (raw, json)
Hash identifier: rSwMDZZ1exx7LBTp6JZrBkob55KlLmWScTSybDByPwM=
Subject key identifier: E4:17:02:42:48:0B:76:78:7E:46:DF:77:5F:7D:47:47:09:02:6E:B7
Certificate issuer: /CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
Certificate serial: 01989DA35872451923A3AF15337EDA3340F1
Authority key identifier: 25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/5BcCQkgLdnh-Rt93X31HRwkCbrc.roa
Signing time: Tue 12 Aug 2025 09:36:24 +0000
ROA not before: Tue 12 Aug 2025 09:36:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 91.193.25.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:a3:58:72:45:19:23:a3:af:15:33:7e:da:33:40:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
Validity
Not Before: Aug 12 09:36:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4170242480b76787e46df775f7d474709026eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:49:68:5b:27:e3:41:e5:07:86:f4:f7:4a:ca:
44:52:34:a4:e0:54:40:ea:4a:02:9d:6e:0d:0f:d2:
5b:41:04:0e:9a:26:55:98:7b:3e:4d:7e:ab:8b:f0:
7c:4c:a6:10:b0:de:ed:40:87:eb:f9:bc:d4:09:d1:
66:7d:2a:eb:15:c6:34:be:f2:68:f5:c5:d3:6e:86:
c6:6f:1f:37:64:da:b5:09:40:dd:31:e1:e0:f2:1d:
dc:25:eb:77:a6:4e:f4:e1:12:59:11:5e:29:d1:97:
39:14:78:ec:51:9a:a7:27:1a:eb:8e:cc:85:f1:51:
39:e3:95:4e:6d:a1:e4:87:7c:cc:a9:77:66:8b:28:
78:f3:a9:5e:e3:22:1d:fd:51:34:ad:35:25:60:7e:
62:b7:ec:9b:7b:cf:7b:c8:4c:fb:de:b3:0e:96:fa:
c5:5f:85:69:70:4e:22:3f:df:66:d8:37:84:b6:8c:
83:31:4b:6c:41:1c:eb:f1:e6:26:b6:7e:cb:25:15:
1e:80:98:4c:c7:b8:f6:ff:37:a5:9c:d2:10:93:5c:
6f:ab:d1:f8:fc:76:02:7e:0c:2f:d2:e0:26:ed:21:
98:34:fd:f4:f0:c2:f4:7c:dc:d1:43:10:72:a3:14:
c4:c8:68:88:00:e0:45:ff:99:d4:99:57:7c:94:17:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:17:02:42:48:0B:76:78:7E:46:DF:77:5F:7D:47:47:09:02:6E:B7
X509v3 Authority Key Identifier:
keyid:25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/5BcCQkgLdnh-Rt93X31HRwkCbrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.25.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:0b:ea:ae:b4:88:85:6c:14:50:ce:92:05:34:45:0d:c3:86:
64:a1:46:03:f3:34:d7:4d:8d:3c:d0:68:84:d9:e9:f3:c0:c9:
87:55:b3:e3:ba:ba:4f:e5:1a:70:da:fd:b0:f4:85:c0:5c:22:
ce:98:0d:4a:6d:65:08:d7:25:c9:3d:db:08:ad:f0:c3:83:d2:
e0:15:4c:23:2a:86:1e:07:21:f7:fb:e7:13:5b:dd:c1:4d:d2:
2d:94:84:e0:6f:97:8d:b3:8d:04:c6:a7:49:0f:83:b1:eb:1c:
27:c0:54:47:eb:a1:d6:49:19:a7:46:7d:03:31:65:f7:05:ad:
b0:c2:e4:2c:a4:4e:8a:d7:d3:ed:c4:b3:1c:9e:01:e7:9a:65:
a0:c0:71:7d:07:63:d5:da:34:6a:b4:16:13:2a:30:a6:33:ef:
70:52:ef:33:2e:fa:c9:c4:c7:36:50:0a:4b:83:ca:3a:0b:1e:
a5:82:a8:c1:1e:f5:3f:d8:c7:61:a4:0e:84:e6:61:b7:14:be:
d9:0f:ae:7b:4c:4e:24:c2:c6:72:88:4f:21:bd:83:d4:78:a0:
49:a6:e4:8b:98:32:4d:ed:f7:36:ac:ed:f4:bc:48:0e:77:3b:
ca:48:4a:9a:a2:8a:b9:2f:21:55:62:24:2f:ee:84:cc:b2:e9:
7e:df:e8:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZido1hyRRkjo68VM37aM0DxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZjNmYjJiMWNiNTBhM2ZjYzY0MjYwODYzM2Y1MTIzNzUy
MjZkMWYwHhcNMjUwODEyMDkzNjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDE3MDI0MjQ4MGI3Njc4N2U0NmRmNzc1ZjdkNDc0NzA5MDI2ZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kloWyfjQeUHhvT3SspEUjSk4FRA
6koCnW4ND9JbQQQOmiZVmHs+TX6ri/B8TKYQsN7tQIfr+bzUCdFmfSrrFcY0vvJo
9cXTbobGbx83ZNq1CUDdMeHg8h3cJet3pk704RJZEV4p0Zc5FHjsUZqnJxrrjsyF
8VE545VObaHkh3zMqXdmiyh486le4yId/VE0rTUlYH5it+ybe897yEz73rMOlvrF
X4VpcE4iP99m2DeEtoyDMUtsQRzr8eYmtn7LJRUegJhMx7j2/zelnNIQk1xvq9H4
/HYCfgwv0uAm7SGYNP308ML0fNzRQxByoxTEyGiIAOBF/5nUmVd8lBdjiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOQXAkJIC3Z4fkbfd199R0cJAm63MB8GA1UdIwQY
MBaAFCXz+ysctQo/zGQmCGM/USN1Im0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmZQN0t4eTFDal9NWkNZSVl6OVJJM1VpYlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hNGNjYTEtNjUxMi00NjYwLTg3MzUt
Nzg3YWFhNDQ0Y2RhLzEvNUJjQ1FrZ0xkbmgtUnQ5M1gzMUhSd2tDYnJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9hNGNjYTEtNjUxMi00NjYwLTg3MzUtNzg3YWFhNDQ0Y2Rh
LzEvSmZQN0t4eTFDal9NWkNZSVl6OVJJM1VpYlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8EZMA0G
CSqGSIb3DQEBCwUAA4IBAQAtC+qutIiFbBRQzpIFNEUNw4ZkoUYD8zTXTY080GiE
2enzwMmHVbPjurpP5Rpw2v2w9IXAXCLOmA1KbWUI1yXJPdsIrfDDg9LgFUwjKoYe
ByH3++cTW93BTdItlITgb5eNs40ExqdJD4Ox6xwnwFRH66HWSRmnRn0DMWX3Ba2w
wuQspE6K19PtxLMcngHnmmWgwHF9B2PV2jRqtBYTKjCmM+9wUu8zLvrJxMc2UApL
g8o6Cx6lgqjBHvU/2MdhpA6E5mG3FL7ZD657TE4kwsZyiE8hvYPUeKBJpuSLmDJN
7fc2rO30vEgOdzvKSEqaooq5LyFVYiQv7oTMsul+3+iu
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:50:57 2025 by rpki-client